Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/keTJqY7deNugwlmSUKuLVvK51wo.roa
File: keTJqY7deNugwlmSUKuLVvK51wo.roa (raw, json)
Hash identifier: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=
Subject key identifier: 91:E4:C9:A9:8E:DD:78:DB:A0:C2:59:92:50:AB:8B:56:F2:B9:D7:0A
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DAF13ADB9A30C6E47CF74E4856E6
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/keTJqY7deNugwlmSUKuLVvK51wo.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44908
IP address blocks: 2a0a:280:3600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:da:f1:3a:db:9a:30:c6:e4:7c:f7:4e:48:56:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e4c9a98edd78dba0c2599250ab8b56f2b9d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:fc:f6:0a:f9:88:b6:b4:db:00:7c:74:9e:
84:2d:5b:4b:90:7c:cd:33:0f:0a:b8:16:96:d6:80:
85:c2:c0:c2:53:0d:f3:22:fd:a1:af:f5:c9:01:76:
9c:4e:c8:d4:7d:8b:17:b8:96:38:66:30:d3:36:14:
66:28:57:d9:41:b9:3a:07:e9:cb:b4:9c:d8:cd:bc:
5e:69:45:44:a4:65:2e:76:6b:50:d7:47:dd:10:13:
36:ee:1e:9b:58:11:d0:3c:ba:ac:71:83:9a:75:97:
38:45:ec:b7:78:e7:ad:29:19:67:31:87:e2:d1:8c:
7f:68:3f:8e:c0:d7:63:f6:ff:4c:ae:52:df:6d:60:
f2:1b:b3:85:64:39:1e:3f:40:2f:55:05:84:23:ef:
e1:5f:81:fd:8c:0b:79:ed:6e:ab:ad:3e:65:9b:bd:
5e:83:2a:25:34:00:23:43:7f:2c:9b:f6:8c:41:1a:
d2:12:42:84:e0:b5:c6:53:67:e8:9a:77:53:6d:b4:
48:6c:fc:51:2c:7d:39:82:f1:7f:57:21:ba:bf:b4:
24:f7:83:05:e3:ff:7f:b9:e4:90:df:bc:62:4a:5b:
f3:10:eb:17:fc:d1:c5:c0:87:10:88:d7:5c:52:1e:
37:75:96:77:f7:13:9c:b1:72:8b:03:f4:b9:4e:5d:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:C9:A9:8E:DD:78:DB:A0:C2:59:92:50:AB:8B:56:F2:B9:D7:0A
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/keTJqY7deNugwlmSUKuLVvK51wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3600::/40
Signature Algorithm: sha256WithRSAEncryption
63:e3:20:45:aa:4c:b4:79:3b:54:82:3c:9e:21:9f:4c:cb:c5:
47:02:10:ae:8d:93:8a:64:2f:06:30:5b:61:5c:c8:5d:09:51:
b1:2f:55:59:76:f5:21:d1:49:d0:a8:fb:2f:b2:78:4f:50:50:
d1:01:85:47:e7:8f:7f:9a:56:1a:ad:84:5d:45:b1:97:d8:73:
13:c9:e8:6d:4d:59:58:b6:50:cc:2d:bb:da:1a:89:e4:66:2d:
bc:ff:68:61:13:40:10:07:07:92:94:cf:32:64:4e:73:91:c4:
7c:aa:1f:ea:5e:a2:8b:3a:19:61:09:47:28:19:e0:6d:13:dc:
ee:39:e9:92:c0:c4:58:8d:1a:a4:33:00:6b:49:69:50:5a:54:
24:56:47:d9:09:c8:2c:04:12:7a:5c:c8:9e:54:0b:1b:e6:36:
39:52:74:31:45:dd:f1:df:ec:36:e8:13:27:68:43:48:cb:d7:
fe:a1:ac:c9:97:2d:57:d7:bc:85:72:60:fb:29:3d:f7:82:fe:
bf:4d:06:de:5d:91:f0:23:db:22:2f:3f:fb:3c:a6:02:44:56:
d1:76:5a:ff:7a:f3:ea:10:cc:56:f5:df:33:5c:9b:a8:63:82:
c8:7f:93:b1:6c:38:c3:63:2e:bb:70:16:35:a3:be:66:ef:88:
11:80:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:50:45 2025 by rpki-client